Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
File:                     qS2ZWfknemWYGuJLQskTT4q-w-Q.roa (raw, json)
Hash identifier:          c30j3e10cm+fcO81ThppgK4Z5CKax0VgMRct3nsgpRo=
Subject key identifier:   A9:2D:99:59:F9:27:7A:65:98:1A:E2:4B:42:C9:13:4F:8A:BE:C3:E4
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       2D
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
Signing time:             Thu 25 Jan 2024 01:18:31 +0000
ROA not before:           Thu 25 Jan 2024 01:18:31 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        210.153.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:18:31 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=A92D9959F9277A65981AE24B42C9134F8ABEC3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:67:f4:a3:1e:04:40:5b:f9:0b:0c:ec:d5:
                    13:d4:3b:93:8d:a4:74:93:fc:0a:9a:16:0a:0b:92:
                    a8:9f:bb:7a:17:c3:05:9d:33:b1:0c:05:ce:1b:68:
                    3d:b4:39:a4:ae:08:fe:b0:08:e9:50:f8:74:5a:e9:
                    b8:c1:1b:ad:f9:c9:ce:85:92:2c:03:08:03:4c:af:
                    95:9d:a1:0b:92:f3:d0:97:bb:b5:bb:66:fb:34:2d:
                    99:e7:05:88:58:64:50:9c:f8:ec:34:1a:7b:22:1b:
                    85:2a:58:9d:d0:0f:b2:ee:cb:7b:60:e2:7c:02:be:
                    a4:96:1b:ba:71:85:66:30:d8:ef:72:04:bf:66:d9:
                    15:38:54:64:58:9d:dd:d4:01:e8:83:95:7b:7d:96:
                    dd:ee:ed:d9:e4:a8:f6:f8:f5:73:ab:d7:36:57:77:
                    53:d3:a3:a5:21:fb:f9:69:8f:c6:f3:0f:a5:28:0d:
                    0f:3d:00:4d:c9:69:b7:af:51:79:7b:a0:0d:5b:9c:
                    1c:a0:e2:4f:89:7c:92:e6:88:4c:a3:9c:4c:bb:4d:
                    81:52:3e:be:75:55:68:3c:9f:ae:46:6b:b4:0f:67:
                    b0:4f:21:1d:00:86:06:34:14:0c:27:cc:02:66:3f:
                    3f:4f:c4:8c:35:e7:b5:db:8e:b4:2a:df:41:3d:10:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2D:99:59:F9:27:7A:65:98:1A:E2:4B:42:C9:13:4F:8A:BE:C3:E4
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:98:d1:89:9e:8e:5e:3b:20:c4:2c:7b:5d:12:4f:29:61:81:
         2b:1e:85:4f:f4:20:10:80:b6:e6:02:90:53:3d:17:e0:cf:b8:
         ff:e4:ab:bf:2c:0e:c8:dc:73:6d:c6:5a:9e:1e:1c:89:07:36:
         d7:f4:b0:81:e5:8e:5d:db:ed:a0:47:51:4a:7e:df:55:70:8b:
         65:ff:13:4d:b8:d9:66:e3:e2:46:db:4b:eb:fd:35:6b:d9:04:
         3f:7b:ca:4a:0c:d7:e7:c9:39:44:51:35:4c:25:b6:a9:1e:ab:
         65:51:fa:15:97:ec:dd:74:87:b4:dd:cb:01:12:6f:07:62:0d:
         92:89:20:88:1b:f9:de:5e:90:dc:f0:20:c4:5e:ee:fa:4d:b2:
         ab:01:d6:0a:d0:43:eb:e6:c4:b6:92:5b:69:02:9f:98:b4:38:
         08:93:c1:5a:54:67:36:b7:83:fc:b8:7f:af:3a:19:99:93:9a:
         37:6f:70:23:96:6e:4f:da:0f:1d:6b:10:03:e0:8e:15:b8:30:
         2a:04:64:ab:97:89:6d:cd:6b:48:5a:c6:ec:c6:9f:9e:5d:b4:
         b4:62:00:db:20:ac:d2:e5:6c:32:76:db:bc:32:dd:cc:ed:15:
         19:bb:ac:0d:ff:f4:49:c3:0e:cb:fa:60:75:c9:f4:6e:6f:9e:
         db:db:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:19 2024 by rpki-client on console-ams.rpki-client.org